First published: Fri Dec 05 2008(Updated: )
The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on a field containing a series of asterisks.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows | ||
IBM Rational ClearQuest | =7.0.0.0 | |
IBM Rational ClearQuest | =7.0.0.1 | |
IBM Rational ClearQuest | =7.0.0.2 | |
IBM Rational ClearQuest | =7.0.0.3 | |
IBM Rational ClearQuest | =7.0.1 | |
IBM Rational ClearQuest | =7.0.1.1 | |
IBM Rational ClearQuest | =7.0.1.2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.